Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          t3Q1ndUeq+qNPIRMHnkRLS/FJYN89qdwqknUxCn2htM=
Subject key identifier:   56:0B:EC:F0:99:73:90:95:54:04:46:F5:61:4E:E9:4A:63:14:8F:73
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       01968736B763065C66A0EE1516359AB0D60A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1525
Signing time:             Wed 30 Apr 2025 15:00:32 +0000
Manifest this update:     Wed 30 Apr 2025 15:00:32 +0000
Manifest next update:     Thu 01 May 2025 15:00:32 +0000
Files and hashes:         1: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (hash: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=)
                          2: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=)
                          3: JgAVdG5w-EH5axbD1z99GAhSHwM.roa (hash: MwMkmJqrwD8veDf1qY/q68vIiUTS/FtXreiv/2+O3/c=)
                          4: NTKDdALBTRm2WTEgZsxcregayPI.roa (hash: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=)
                          5: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=)
                          6: ghM-kJXHfCuQIsTW7IVqHK_p1rw.roa (hash: 1pz7wcnZQbvTJAfQwp2kKsocNFa8g8mY6nXziu1AfXw=)
                          7: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: pGMc1lgj31mmvklMSb8x3qJKEUXsDRLjiGjF6fh7+s0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:36:b7:63:06:5c:66:a0:ee:15:16:35:9a:b0:d6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Apr 30 15:00:32 2025 GMT
            Not After : May  1 15:00:32 2025 GMT
        Subject: CN=560becf099739095540446f5614ee94a63148f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:68:ed:ff:cf:5e:4f:cc:a4:6a:b6:18:39:
                    5b:6f:a9:13:db:a9:ad:2b:61:03:4e:34:91:f3:d9:
                    35:6f:4b:da:35:1c:39:94:90:78:eb:d8:26:97:a8:
                    d8:51:05:20:b9:ed:db:fc:b5:07:99:b7:78:ad:c4:
                    12:f7:82:05:81:4c:70:fa:8b:58:06:14:73:11:91:
                    8b:15:64:b0:5d:33:14:41:2d:06:98:40:90:74:dd:
                    51:79:ee:75:94:78:82:94:5c:fe:fa:61:1e:49:e6:
                    3c:d9:44:25:74:f6:5a:b8:16:7e:a8:f7:62:4c:1e:
                    c4:d4:62:5c:a3:09:3c:9a:5c:c4:2f:54:2d:2c:70:
                    b2:4f:71:39:5b:29:e3:23:09:ea:d0:c1:76:4a:9f:
                    bc:77:32:43:34:6d:1d:ff:ed:13:9e:21:ee:fe:1b:
                    47:b6:75:a2:7a:cd:eb:1b:dc:c0:b6:49:0c:fa:ee:
                    33:37:88:93:f7:83:7e:c7:b1:f6:ee:db:50:f6:37:
                    09:e5:e8:de:9b:13:12:86:5b:67:a4:54:b4:e0:d9:
                    3a:b1:36:15:e6:5f:6c:5a:18:44:32:3c:9f:77:b4:
                    4f:ab:c6:7d:75:49:00:9a:55:ab:3d:3e:74:03:45:
                    91:ab:f6:56:db:56:27:e0:ae:91:c4:72:68:3f:df:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0B:EC:F0:99:73:90:95:54:04:46:F5:61:4E:E9:4A:63:14:8F:73
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:51:d8:13:45:13:8e:68:43:35:ea:d3:8d:15:22:d8:27:
         d4:31:0b:21:b2:34:28:75:3d:86:4a:2e:8b:63:ab:9d:06:b8:
         8f:3f:fd:0b:27:8b:bc:b7:39:30:9b:20:8d:cd:0b:2c:1a:e2:
         57:a8:7d:05:5b:43:ee:e9:86:44:27:f0:a7:92:02:98:d7:46:
         f0:bb:bd:51:40:84:53:66:68:97:9e:9c:f6:01:46:c0:c9:2f:
         e1:d0:22:ea:bc:89:27:e9:e9:aa:96:2f:d8:88:2f:1a:97:c6:
         de:9d:14:6c:0d:52:35:dd:72:41:12:1a:36:f0:dd:1a:cb:2b:
         50:1d:f7:83:08:6d:35:c6:be:dd:fb:ad:d4:7f:7a:b3:3d:54:
         1d:25:17:8b:ae:03:10:2b:b5:fd:f4:33:2f:e9:42:9f:2b:04:
         bd:e4:13:9a:ca:ee:5e:98:93:9f:a4:92:b8:61:8e:d2:44:3d:
         e2:36:56:81:7c:a8:b1:2f:be:e6:12:5d:96:09:67:e1:5c:ed:
         ae:2f:c0:92:92:37:5c:2e:02:a1:55:bb:8d:ba:c4:31:b8:36:
         11:ee:d8:59:96:a4:d1:4f:ff:1e:22:38:74:e7:2e:3d:07:bf:
         5d:6a:65:40:0a:c6:5d:b7:64:ed:81:98:2c:ed:99:50:d6:8d:
         08:de:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:37:29 2025 by rpki-client